| elastic |
Remote File Creation in World Writeable Directory |
production |
2026-09-18 |
| elastic |
Potential THC Tool Downloaded |
production |
2026-09-18 |
| elastic |
Connection to External Network via Telnet |
production |
2026-09-18 |
| elastic |
Connection to Internal Network via Telnet |
production |
2026-09-18 |
| elastic |
Unusual Remote File Creation |
production |
2026-09-18 |
| elastic |
Suspicious APT Package Manager Execution |
production |
2026-09-18 |
| elastic |
APT Package Manager Configuration File Creation |
production |
2026-09-18 |
| elastic |
Suspicious APT Package Manager Network Connection |
production |
2026-09-18 |
| elastic |
At Job Created or Modified |
production |
2026-09-18 |
| elastic |
Binfmt Configuration File Creation |
production |
2026-09-18 |
| elastic |
Boot File Copy |
production |
2026-09-18 |
| elastic |
Suspicious Usage of bpf_probe_write_user Helper |
production |
2026-09-18 |
| elastic |
BPF Program or Map Load via bpftool |
production |
2026-09-18 |
| elastic |
Chkconfig Service Add |
production |
2026-09-18 |
| elastic |
Cron Job Created or Modified |
production |
2026-09-18 |
| elastic |
D-Bus Service Created |
production |
2026-09-18 |
| elastic |
Unusual D-Bus Daemon Child Process |
production |
2026-09-18 |
| elastic |
DNF Package Manager Plugin File Creation |
production |
2026-09-18 |
| elastic |
DPKG Package Installed by Unusual Parent Process |
production |
2026-09-18 |
| elastic |
Unusual DPKG Execution |
production |
2026-09-18 |
| elastic |
Dracut Module Creation |
production |
2026-09-18 |
| elastic |
Dynamic Linker Copy |
production |
2026-09-18 |
| elastic |
Initramfs Extraction via CPIO |
production |
2026-09-18 |
| elastic |
Git Hook Command Execution |
production |
2026-09-18 |
| elastic |
Git Hook Created or Modified |
production |
2026-09-18 |
| elastic |
Git Hook Egress Network Connection |
production |
2026-09-18 |
| elastic |
Git Hook Child Process |
production |
2026-09-18 |
| elastic |
GRUB Configuration File Creation |
production |
2026-09-18 |
| elastic |
GRUB Configuration Generation through Built-in Utilities |
production |
2026-09-18 |
| elastic |
System V Init Script Created |
production |
2026-09-18 |
| elastic |
Kernel Module Load via Built-in Utility |
production |
2026-09-18 |
| elastic |
Kernel Driver Load |
production |
2026-09-18 |
| elastic |
Kernel Driver Load by non-root User |
production |
2026-09-18 |
| elastic |
Kernel Module Load from Unusual Location |
production |
2026-09-18 |
| elastic |
Kubernetes Sensitive Configuration File Activity |
production |
2026-09-18 |
| elastic |
Kubernetes Static Pod Manifest File Access |
production |
2026-09-18 |
| elastic |
Suspicious File Creation via Kworker |
production |
2026-09-18 |
| elastic |
Potential Linux Backdoor User Account Creation |
production |
2026-09-18 |
| elastic |
Linux Group Creation |
production |
2026-09-18 |
| elastic |
Linux User Added to Privileged Group |
production |
2026-09-18 |